From 56ae6fc4dc6419afe860f97d4a9cd8c4ee7fc3b5 Mon Sep 17 00:00:00 2001
From: Neil Hanlon <neil@rockylinux.org>
Date: Sun, 22 May 2022 16:06:31 -0400
Subject: [PATCH] Add script to propagate images

---
 sync/propagate-image.sh | 120 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 120 insertions(+)
 create mode 100644 sync/propagate-image.sh

diff --git a/sync/propagate-image.sh b/sync/propagate-image.sh
new file mode 100644
index 0000000..9b71bc5
--- /dev/null
+++ b/sync/propagate-image.sh
@@ -0,0 +1,120 @@
+#!/bin/bash 
+
+source_ami="$1"
+source_region="$2"
+
+if [[ -z $source_ami || -z $source_region ]]; then
+  echo "usage: $0 source_ami source_region"
+  exit 2
+fi
+
+RESF_AMI_ACCOUNT_ID=792107900819
+
+REGIONS=$(aws --profile resf-ami ec2 describe-regions \
+    --all-regions \
+    --query "Regions[].{Name:RegionName}" \
+    --output text | grep -vE "$source_region")
+
+SOURCE_AMI_NAME=$(aws --profile resf-ami ec2 describe-images \
+   --region "$source_region" --image-ids "$source_ami" --query 'Images[0].Name'\
+   --output text )
+
+# Enforce a name structure
+# Rocky-8-ec2-8.6-20220515.0.x86_64
+if [[ ! "${SOURCE_AMI_NAME}" =~ Rocky-[89]-ec2-[89]\.[0-9]-[0-9]+\.[0-9]+\.((aarch|x86_)64|ppc64le|s390x) ]]; then
+  echo "Bad source ami (${SOURCE_AMI_NAME}). Exiting."
+  exit 1
+fi
+
+function copy(){
+  for region in $REGIONS; do 
+    echo -n "Creating copy job for $region..."
+    ami_id=$(aws --profile resf-ami ec2 copy-image \
+      --region $region \
+      --name "${SOURCE_AMI_NAME}" \
+      --source-image-id "${source_ami}" \
+      --source-region "${source_region}" \
+      --output text 2>&1)
+    if [[ $? -eq 0 ]]; then
+      unset ami_ids[$region] 
+      echo ". $ami_id"
+      if [[ ! -z "$ami_id" ]]; then
+        ami_ids[$region]="$ami_id"
+      fi
+      continue
+    fi
+    echo ".an error occurred (likely region is not signed up). Skipping."
+  done
+}
+
+function change_privacy(){
+  local status="$1"
+  local launch_permission
+  case $status in
+    Private)
+      launch_permission="Remove=[{Group=all}]"
+      ;;
+    Public)
+      launch_permission="Add=[{Group=all}]"
+      ;;
+  esac
+  local finished=false
+  while ! $finished; do
+    for region in "${!ami_ids[@]}"; do 
+      echo -n "Making ${ami_ids[$region]} in $region $status..."
+      aws --profile resf-ami ec2 modify-image-attribute \
+        --region $region \
+        --image-id "${ami_ids[$region]}" \
+        --launch-permission "${launch_permission}" 
+      if [[ $? -eq 0 ]]; then
+        unset ami_ids[$region] 
+        echo ". Done"
+        continue
+      fi
+      echo ". Still pending"
+    done
+    if [[ ${#ami_ids[@]} -gt 0 ]]; then
+      echo -n "Sleeping for one minute... "
+      for (( i=0; i<60; i++ )); do
+        if [[ $((i%10)) -eq 0 ]]; then 
+          echo -n "$i"
+        else 
+          echo -n "."
+        fi
+        sleep 1
+      done
+      echo ""
+    else 
+      finished=true
+      break
+    fi
+  done
+  echo "Completed!"
+}
+
+function find_image_by_name(){
+  # ami_ids[region]=ami_id
+  for region in $REGIONS; do
+    expected_name="Copy of ${source_ami} from ${source_region}"
+    # ami-id "name"
+    local query="$(printf 'Images[?Name==`%s`]|[?Public==`true`].[ImageId,Name][]' "${expected_name}")"
+    mapfile -t res < <(
+      aws --profile resf-ami ec2 describe-images --region $region --owners $RESF_AMI_ACCOUNT_ID \
+        --query "${query}" 2>/dev/null \
+        | jq -r '.|@sh'#  | tr "'" '"'
+              )
+    res=($res)
+    if [[ ${#res[@]} -eq 0 ]]; then
+      # Skip empty results
+      continue
+    fi
+    id=${res[0]//\"}
+    name=${res[@]/$id}
+    printf "Found public image: %s in %s with name '%s'\n" "$id" "$region" "${name//\"}"
+    ami_ids[$region]=$id
+  done
+}
+
+declare -A ami_ids
+copy
+change_privacy Public # uses ami_ids